Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
File: z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft (raw, json)
Hash identifier: 8LlIiqa/tJ/5JFhsydGYf2O8U/LJQcjd/vuDnhNjTi4=
Subject key identifier: 81:FE:52:D1:E7:F8:7C:74:B2:19:CF:4C:5E:35:A1:8F:B8:45:E3:1F
Authority key identifier: CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06
Certificate issuer: /CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
Certificate serial: 0198861FD064D45788A618CB877B53EAC374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
Manifest number: 04BF
Signing time: Thu 07 Aug 2025 20:01:28 +0000
Manifest this update: Thu 07 Aug 2025 20:01:28 +0000
Manifest next update: Fri 08 Aug 2025 20:01:28 +0000
Files and hashes: 1: z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl (hash: +nPbFZJVlr1c379gcX6jXeVYZdh7Mz2OEXmBocjipCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:1f:d0:64:d4:57:88:a6:18:cb:87:7b:53:ea:c3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
Validity
Not Before: Aug 7 20:01:28 2025 GMT
Not After : Aug 8 20:01:28 2025 GMT
Subject: CN=81fe52d1e7f87c74b219cf4c5e35a18fb845e31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:13:94:b4:f5:6a:a0:33:ee:31:42:aa:bd:
79:3d:16:0c:cd:5f:7e:df:54:ac:bd:fa:39:c4:99:
24:d0:fc:ac:c1:51:9b:85:8f:05:9a:42:27:f5:c6:
59:87:1c:a7:ea:cf:bc:79:d5:23:54:2a:d2:c9:2c:
c0:0d:9b:ca:7c:3b:55:e8:74:07:a8:e9:15:87:b3:
2a:82:24:c0:66:01:54:4f:37:78:3c:c3:4e:c2:94:
5d:1e:82:de:07:a5:66:b3:1f:fa:23:3e:92:f5:b0:
08:7c:78:8e:1c:d7:77:1b:d4:8a:6a:51:21:2e:98:
39:92:2f:1b:07:41:42:5e:85:c5:fd:96:ec:7d:39:
96:98:d8:0f:4f:31:b3:d3:b8:32:2c:22:64:23:49:
58:89:fb:63:36:56:c0:8a:fe:78:33:51:67:cb:02:
36:2e:b6:55:37:d7:50:65:c3:36:95:7a:3e:c8:63:
a0:a4:45:a3:51:7f:10:36:9c:02:e4:f7:98:1c:6e:
a4:86:53:9c:fe:fd:de:55:19:5c:71:55:ef:c4:69:
e7:5f:86:1f:33:54:b1:45:fe:0f:46:58:04:98:97:
7d:c9:d4:de:ea:21:d8:b2:8a:9c:b4:c6:78:37:6e:
d2:69:c0:ca:87:4c:f3:8a:4a:95:75:f4:f9:c5:e1:
d7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FE:52:D1:E7:F8:7C:74:B2:19:CF:4C:5E:35:A1:8F:B8:45:E3:1F
X509v3 Authority Key Identifier:
keyid:CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d8:59:b6:14:0d:51:e0:89:34:fe:0a:b1:af:73:f1:39:07:
95:23:2b:68:29:f4:2d:f6:56:6b:e2:9e:9f:d1:f8:68:12:54:
77:a3:ba:04:76:59:93:0e:70:f1:33:f3:e0:8e:80:6a:71:95:
f9:4c:7d:71:f5:93:ac:43:fe:21:c7:73:b4:66:22:79:79:ee:
b3:7b:07:d4:9b:c3:59:4a:74:be:76:cc:97:24:08:10:8c:1e:
d2:bd:8f:f1:35:4e:0c:1a:a1:9e:e4:a8:d0:18:9b:62:6a:50:
f4:3c:80:3e:47:80:c5:34:47:9c:6d:a6:f0:a9:3e:90:a3:64:
e6:fb:29:47:db:bb:61:31:d5:d4:ae:fa:8d:13:0d:b9:74:5a:
3f:a2:15:20:9e:a8:9b:48:22:45:a1:d6:f6:74:63:01:41:96:
d8:cf:2e:1e:80:f5:e3:94:f9:4d:e5:ab:05:ba:ef:f8:51:af:
f9:76:bd:64:78:b7:f1:30:4c:7d:bd:6c:70:ee:af:5d:e6:a5:
27:51:e3:20:96:fc:a4:24:d5:e8:8b:b8:36:48:12:16:e1:d3:
12:13:57:4d:3a:2c:1f:62:5b:f1:8b:9f:d4:88:02:cb:2b:d5:
b2:93:c0:33:e0:5c:b4:35:8e:9c:9c:40:72:44:e5:1e:00:db:
ed:0e:d9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:50:03 2025 by rpki-client